Threats through messages or social media

The criminal law question is more concrete than an unpleasant feeling

Article 285 of the Criminal Code describes various forms of criminal threats. Not every unfriendly, aggressive or intimidating message automatically falls into every category mentioned therein. The nature of the evil announced and the circumstances are important. Let the lawyer first determine exactly what threat is being blamed. A broad charge such as online harassment may contain several criminal questions, including threats, harassment or insult, which do not have the same elements.

The digital form does not change that need for precision. A direct private message, an expression in a group conversation and a publicly posted message may otherwise reach a data subject. Therefore, do not just ask whether the text sounds harsh, but what accusation is based on this concrete communication. This does not put the victim experience into perspective nor does it assume guilt. The aim is to understand which facts must be established for the legal assessment and on which there is a real difference of opinion in the criminal case.

Read what preceded and followed the message

The words are not separate from the conversation. A previous confrontation, reference to a home or photo of an object can influence the meaning of a short sentence. The mutual relationship and known events can also be relevant. Therefore, create a timeline with sufficient preceding and following messages. A casual screenshot that starts at the offending answer may omit information necessary for seriousness or significance. Conversely, a long history does not make every threatening expression innocent.

Provide the lawyer with the full relevant context, including messages that you yourself find unfavorable. Note where something is only your interpretation. For example: I meant a conversation about money, while the recipient read it as a reference to violence. That intention must then be assessed alongside the words and circumstances; one's own explanation is not automatically decisive. A careful file makes visible which meaning is objectively supported by data and where parties have different readings of the same communication.

A judgment shows why words and circumstances count together

HR 7 June 2005, ECLI:NL:HR:2005:AT3659 focused on a telephone statement. The Supreme Court discussed whether the nature and circumstances could give rise to reasonable fear for threats involving a life-threatening crime. The motivation for the finding of conviction was inadequate in that case. It was not a WhatsApp case, but the ruling makes a fundamental point recognizable: a formulation that is found to be threatening does not mention all the data that must support the legal conclusion. (HR June 7, 2005, ECLI:NL:HR:2005:AT3659)

The Supreme Court dismissed the case; the judgment is not a general license for ambiguous language. Nor does it mean that the recipient must first visibly panic before a threat can be punishable. Use the statement as a reason for specific questions: which threat has been proven, which circumstances support that meaning and what does the file show? A lawyer must connect the applicable standard to the concrete digital conversation, instead of using one old formulation as a universal counterargument.

An account and the person behind a message are separate questions

An account can be under one name and multiple people have access. A phone can be shared or a session can be open on another device. These are possible research questions, not an automatic explanation for every incriminating message. Question on which the sendership file is based: device examination, account information, statements, a conversation history or other information. A contact name that someone has saved in their phone does not in itself prove who created the content.

Explain alternative access specifically when it actually existed. Who had what device, at what time and with what permission? Keep existing data that supports that. Avoid a blanket denial that it could have been anyone when there is no concrete evidence. The lawyer must also be able to assess the incriminating combination, for example knowledge of details that few people had. A reliable reconstruction identifies the limits of identification without turning every theoretical possibility into a factual scenario.

Screenshots are a starting point, not a complete technical file

A screenshot can show relevant content, but does not necessarily show all metadata, previous messages or changes. Check which conversation and account are visible, whether times are complete and whether an original is available. An export or examination of the device may provide different information than a cropped image. At the same time, the absence of a technical file does not automatically prove that a screenshot is worthless. The judge assesses the available evidence in context.

If in doubt, make it clear what exactly is missing and why it can make a difference. Is it the date, the recipient, a clipped response or the origin of the file? Don't just ask for all digital data without direction. The current Supreme Court explanation on telephone investigations also shows that access to telephone data has its own legal framework. A substantive problem with a message and a question about legitimate research are different points, each requiring its own substantiation.

How did the expression reach the person to whom it referred?

With a direct message, the communication route is different than with a comment about someone in a closed group. Investigate who received the message, who possibly forwarded it and what was known about the follow-up. A reading indicator can provide information, but also explain what it does and does not show in the situation used. The legal assessment of the intent and knowledge requires more than a loose assumption that everything that is online ultimately reaches everyone.

Also discuss what the recipient already knew at the time. A photo of a door may mean little to an outsider, but in a certain history it may support a concrete threat. The reverse is also possible: an expression can be read differently without explanation than in the entire conversation. Do not mix these questions with judgments about the recipient's character. The defense must investigate relevant circumstances, not try to discredit the other person's experience with general qualifications.

An appeal to anger or humor does not replace the assessment

A suspect can state that he was angry, exaggerating or joking. That explanation can provide context, but it does not automatically take away the meaning of the words and other evidence. The question of whether there was intent to commit the relevant threat must be assessed within the criminal law framework. The intention to actually carry out the announced act is not in any case the same requirement as the intent that must be established for threat. Let that distinction be explained before you make a statement.

Especially during tense digital conversations, people can subsequently attribute different intentions to the same sentence. Write down what you knew at the time and what communication supports that explanation. Don't invent an extenuating context that didn't exist. A lawyer can help determine which information is relevant and which questions need to be answered first from the file. There is no need to prove one's own intentions in a hasty additional message to the other party. New contact can worsen the situation and raise a separate legal problem.

Fictional example: a photo changes the research question

In a fictional example, after a payment dispute, Jules writes that he will come by later. In itself, that sentence does not provide a complete picture of the accusation. The file also contains a photo of the recipient's front door, sent after previous confrontations. Jules says he just wanted to talk about a conversation. The lawyer must therefore look at the precise words as well as the photo, the timeline and the account usage. A single selected sentence could distort the seriousness of the issue.

In a second fictional variant, the photo appears to come from a much older conversation about a renovation. That can provide a different context, if the origin can be verified. Neither variant in itself produces a fixed outcome. The example shows why a defense sometimes starts with organizing data. The substantive consideration must rest on the real connection between messages and events, not on a folder of images without the order and original conversations.

A complete reconstruction without changing any data

Save relevant conversations and files in their original form and discuss with the lawyer how a safe copy is made. Do not enter accounts yourself or obtain messages from others outside your authority. A reconstruction must make it clear where the information comes from. For your own memory, note that it is a memory. The criminal procedure rules determine which investigation options and process routes are available; own collection work does not replace that framework.

• Utterance: exact text, image, sound file and original conversation source.
• Time: dispatch, possible changes, forwarding and first inspection.
• Identity: account, device, actual user and concrete access data.
• Context: relevant history and messages before and after the utterance.
• Reception: original recipient and any further communication route.
• Difference: which file fragment is incomplete or requires technical investigation?
• Continued: Attorney, Ongoing Restrictions, and Safekeeping of Original Data.

A targeted defense examines seriousness and evidence separately

Our conclusion: digital threats require a file that is both humanly and technically understandable. The account inquiry may become clearer while the meaning of the words remains contested, or vice versa. By formulating these questions separately, it becomes clear which additional research could be useful. Complete context must also include facts that support seriousness. Selecting only the most favorable messages undermines the purpose of the reconstruction and makes a later comparison with the complete file difficult.

Use the general guide on threats to the broad standard and discuss concrete communication with a criminal lawyer. In the event of a device being seized, accessibility, data and any investigative powers are also separate topics. Do not seek direct contact to have a declaration withdrawn or to demand an explanation. Good preparation brings the information into the case via the correct process route and helps prevent an existing conflict from escalating further due to new messages. (general guide to threat)